339822003f965cc237776cc165212d55_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

339822003f965cc237776cc165212d55_JaffaCakes118
Size

29KB
MD5

339822003f965cc237776cc165212d55
SHA1

34d8e09612aee5487ee3e7f925eaa942a8d14f54
SHA256

e12cc90c8fd43dc41622826502f3f174867a269d9977e03ff3608a5ed259d902
SHA512

d81769df09790e33254f0bb4c4bda68b41c798b98b612e696b8144394d04b94e73b15e5fe5476a7bfae200ac38472ed1727048988eb45c663193b06169a59e51
SSDEEP

384:rz8HW1Brx+S9YjNbMKwxYgbLlWGDGr0FMQQyD4/21Dld/QLqZqW6VUDIhQe:rSAK55bMKwH00hPdSnVKe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
339822003f965cc237776cc165212d55_JaffaCakes118

Files

339822003f965cc237776cc165212d55_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0012a9ffca20938104436dbeb8f204a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
ReadFile
CreateFileA
GetProcAddress
GetModuleHandleA
CreateMutexA
OpenMutexA
GetFileSize
CloseHandle
GetStartupInfoA

msvcrt

_except_handler3
realloc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
free

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 698B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ